Where to Store Android KeyStore File in CI/CD Cycle?

In the previous post, I mentioned Android Automated Build with Circle CI. When I wrote that post, we stored keystore(.jks) file as is in version control system. I know it’s huge security risk but it was the fastest way to run CI process and repository was private. In this post, I’ll talk about app signing process and how and why we secure keystore files in CI.